GRIND Privacy Policy

Effective date: 27 May 2026
Last updated: 7 September 2026

Montrose Labs (“we”, “us” or “our”) operates the GRIND fitness and activity-tracking application (“GRIND”, the “App” or the “Service”).

This Privacy Policy explains what personal information GRIND may collect, how that information is used, how it may be shared, how long it is retained, and the choices and rights available to users.

By using GRIND, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on the GRIND features you use and the permissions you provide, we may collect the following information:

Account Information

This may include:

• Name

• Email address

• Account identifiers

• Profile information

Fitness and Profile Information

You may provide information such as:

• Age

• Height

• Weight

• Fitness preferences

• Fitness goals

• Training preferences

• Workout preferences

Workout and Activity Information

GRIND may collect and store information generated when you use fitness and activity features, including:

• Workout history

• Exercises

• Sets, repetitions and weights

• Activity type

• Activity duration

• Distance

• Pace

• Training progress

• Workout notes

• Saved routes

• Activity history

Location and GPS Information

When you use outdoor activity tracking or other location-based features, GRIND may collect GPS location information required to:

• Record walking, running, cycling or other outdoor activities

• Calculate distance and pace

• Display your route

• Record activity progress

• Save completed routes within your activity history

Location information is only accessed where the appropriate device permissions have been granted.

Device and Technical Information

We may collect limited technical information such as:

• Device type

• Operating system

• App version

• Diagnostic information

• Crash information

• Performance information

• Technical logs

Support Information

If you contact Montrose Labs for support, we may process information you provide in your message, including your email address and details relating to the issue you are experiencing.

AI Feature Information

Information you submit to GRIND’s AI-powered features may be processed to provide coaching insights, workout suggestions and related responses.

Users should avoid entering unnecessary sensitive medical or personal information into AI-powered features.

2. Health and Fitness Data

GRIND processes fitness and activity information that users provide or generate while using the App.

This may include:

• Workouts

• Training history

• Activity sessions

• Exercise information

• Duration

• Distance

• Routes

• Pace

• Fitness goals

• Training preferences

• Progress information

GRIND is designed as a fitness and activity-tracking application and is not intended to provide medical diagnosis or treatment.

GRIND does not currently access heart-rate data from Apple Health, Health Connect, wearable devices or other connected health services unless such functionality is explicitly made available within the App and the user grants the required permissions.

If additional health integrations are introduced in the future, GRIND will request the appropriate permissions before accessing the relevant information and this Privacy Policy will be updated where necessary.

3. How We Use Your Information

We may use information collected through GRIND to:

• Create and manage user accounts

• Provide workout and fitness-tracking features

• Save workout and activity history

• Track walking, running and other location-based activities

• Calculate activity distance, pace and duration

• Display maps and saved routes

• Provide AI-generated coaching insights

• Personalise training suggestions

• Display statistics and progress

• Save fitness goals and preferences

• Verify subscription access

• Provide premium GRIND Pro features

• Improve App performance and reliability

• Diagnose crashes and technical issues

• Respond to support requests

• Prevent misuse or fraud

• Maintain App security

• Comply with legal obligations

We do not sell users’ personal information.

4. Location Data

GRIND uses location information when users activate features requiring GPS tracking.

This may include walking, running, cycling or other outdoor activities.

Location information may be used to:

• Record activity routes

• Measure distance

• Calculate pace

• Display maps

• Track activity progress

• Save completed routes

• Display activity history

Where you have granted the required device permissions, GPS tracking may continue during an active activity session while GRIND is operating in the background or while your device screen is locked.

This helps GRIND maintain accurate activity tracking when an active workout is underway.

GRIND does not intentionally continuously track your location when no location-based activity session or location-dependent feature is active.

Location information saved as part of a completed activity may remain associated with that activity until you delete the activity or your GRIND account.

You may control or disable location access through your device settings at any time. Disabling location access may prevent some GPS and route-tracking features from functioning correctly.

5. AI-Powered Features

GRIND uses AI-powered services to provide features such as:

• Workout suggestions

• Fitness coaching insights

• Training analysis

• Recovery guidance

• Performance feedback

• Personalised fitness recommendations

Workout and activity information may be processed by third-party AI providers where necessary to generate these responses.

We aim to minimise the amount of directly identifiable personal information shared with AI providers.

AI-generated information is provided for general informational and fitness purposes only.

GRIND is not a medical application, and AI-generated content should not be treated as medical advice, diagnosis or treatment.

Users should consult an appropriately qualified healthcare professional where medical advice is required.

6. Payments and Subscriptions

GRIND may offer optional paid subscriptions, including GRIND Pro.

Subscription purchases made through the iOS version of GRIND are processed by Apple through the App Store.

Subscription purchases made through the Android version of GRIND are processed through Google Play.

Montrose Labs does not directly collect or store users’ full payment-card or banking details for App Store or Google Play subscriptions.

We may receive and process limited subscription-related information including:

• Subscription status

• Subscription product or plan

• Purchase date

• Renewal date

• Expiration date

• Cancellation status

• Transaction identifiers

• Purchase identifiers

• Subscription entitlement status

GRIND uses RevenueCat to help manage subscriptions, verify purchases and determine whether premium features should be available to a user.

RevenueCat may process limited purchase, transaction, device and subscription information required to provide subscription-management services.

Payment processing, refunds, billing and payment-account information are handled by Apple or Google depending on the platform through which the subscription was purchased.

7. Third-Party Services

GRIND may use third-party service providers to operate, maintain and improve the App.

These may include:

Apple Services

Apple may process information relating to App Store purchases, subscriptions, authentication and device services where applicable.

Google Services

GRIND may use services provided by Google, including:

• Google Maps

• Google Play Services

• Location-related services where applicable

Google’s own privacy policies and terms may apply when its services are used.

RevenueCat

GRIND uses RevenueCat to:

• Verify subscription purchases

• Manage subscription entitlements

• Determine whether users have access to premium features

• Process limited subscription and transaction information

Hosting, Authentication and Database Providers

Third-party infrastructure providers may process limited account and App information where necessary to:

• Host GRIND services

• Authenticate users

• Store account information

• Store fitness and activity data

• Operate App functionality

Analytics and Diagnostic Providers

We may use third-party providers to help identify:

• App crashes

• Technical problems

• Performance issues

• Reliability problems

AI Service Providers

Third-party AI providers may process workout or fitness-related information where required to produce AI-generated coaching responses.

We only share information with service providers where reasonably necessary to operate GRIND, provide requested functionality, maintain security, comply with applicable law or protect users.

8. Data Retention

GRIND retains personal information only for as long as reasonably necessary to:

• Provide the Service

• Fulfil the purposes described in this Privacy Policy

• Comply with legal obligations

• Resolve disputes

• Prevent fraud or misuse

• Maintain App security

Our general retention practices are:

• Account and profile information may be retained while your GRIND account remains active.

• Fitness preferences, goals, workout history and progress information may be retained until you delete the information or your account.

• Saved activity routes and associated location information may be retained until the relevant activity or account is deleted.

• Customer-support correspondence may be retained for up to 24 months after a support matter is closed.

• Security, diagnostic and technical logs may be retained for up to 90 days.

• Following a verified account-deletion request, eligible personal information will normally be deleted or irreversibly anonymised within 30 days.

• Residual information may remain within encrypted backup systems for up to an additional 30 days before being removed through normal backup processes.

Information may be retained for longer where reasonably necessary to:

• Comply with a legal obligation

• Prevent fraud

• Investigate misuse

• Protect users

• Resolve a dispute

• Enforce an agreement

Anonymous or aggregated information that can no longer reasonably identify an individual may be retained for analytics, security and service-improvement purposes.

9. Account and Data Deletion

Users may request deletion of their GRIND account and associated personal information at any time.

Delete Your Account Through GRIND

Where available:

1. Open the GRIND app.

2. Go to Profile.

3. Open Settings or Account Settings.

4. Select Delete Account.

5. Review the information presented.

6. Confirm the deletion request.

Request Account Deletion by Email

If the in-App deletion option is unavailable, you may contact:

mmontrose@montroselabs.co.uk

Use the subject:

GRIND Account Deletion Request

Where possible, the request should be sent using the email address associated with the GRIND account.

We may need to verify account ownership before completing a deletion request.

Users may also request deletion of specific personal information without deleting their entire account by contacting the same email address and explaining which information they would like removed.

Following verification, applicable account information and associated personal information, including profile information, fitness preferences, workout records, progress information and saved routes, will normally be deleted or irreversibly anonymised within 30 days.

Certain information may be retained where necessary for legal, security, fraud-prevention or dispute-resolution purposes.

Account deletion is permanent and may not be reversible.

Deleting a GRIND account does not necessarily cancel an active App Store or Google Play subscription.

Subscriptions should also be cancelled separately through the relevant Apple App Store or Google Play subscription-management settings.

10. Data Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against:

• Unauthorised access

• Loss

• Misuse

• Alteration

• Disclosure

Data transmitted between GRIND and supported services is protected using encrypted connections such as HTTPS where applicable.

However, no electronic storage or internet transmission system can be guaranteed to be completely secure.

11. Your Choices and Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Request deletion of your information

• Restrict certain processing

• Object to certain processing

• Withdraw consent where processing is based on consent

• Request a portable copy of eligible information

• Submit a complaint to an applicable data-protection authority

Requests may be sent to:

mmontrose@montroselabs.co.uk

We may request reasonable information to verify the identity or account ownership of the individual making the request.

Users can also control permissions such as location access through their device settings.

12. Children’s Privacy

GRIND is not directed towards children under the age of 13.

We do not knowingly collect personal information from children under the age of 13.

If a parent or guardian believes that a child under 13 has provided personal information to GRIND, they should contact:

mmontrose@montroselabs.co.uk

We will investigate the request and delete the relevant information where appropriate.

13. International Data Processing

Some third-party service providers used by GRIND may process information in countries outside the country in which you live.

Where required by applicable law, we take reasonable steps to ensure appropriate safeguards are used when personal information is transferred internationally.

14. Changes to This Privacy Policy

We may update this Privacy Policy when:

• GRIND features change

• New services are introduced

• Data-processing practices change

• Legal or regulatory requirements change

The updated Privacy Policy will be published on this page and the Last updated date will be changed accordingly.

Where required by law, users may also be provided with additional notice of material changes.

15. Contact Us

For privacy-related questions, requests, complaints or account-deletion enquiries, please contact:

Montrose Labs
Email: mmontrose@montroselabs.co.uk